Introduction
jojobet ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of every individual who accesses the website located at https://jojobet.buzz (the "Site") or uses any associated service, feature or functionality (collectively, the "Services").
This Privacy Policy ("Policy") sets out the categories of personal data we may collect from users ("you", "User", "Player"), the purposes for which that data is processed, the parties with whom it may be shared, the period for which it is retained, and the rights available to you in relation to your personal data.
This Policy applies to all individuals who register an account, deposit funds, submit identity verification documents, contact customer support or otherwise interact with jojobet. By accessing or using the Services, you acknowledge that you have read and understood this Policy. If you do not agree to the processing of your personal data as described, you should not use the Services.
Scope note: This Policy covers personal data processed by jojobet directly. Third-party payment providers such as Maybank, CIMB, Touch 'n Go eWallet, Boost, GrabPay, DuitNow and FPX operate under their own separate privacy policies, which users should review independently.
Definitions
For the purposes of this Policy, the following terms carry the meanings assigned below:
- "Personal Data" means any information that identifies or can reasonably be used to identify a living individual, whether directly or indirectly.
- "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, erasure or destruction.
- "Data Controller" means jojobet, the entity that determines the purposes and means of processing Personal Data.
- "Data Processor" means any third party that processes Personal Data on behalf of jojobet, pursuant to documented instructions.
- "Sensitive Data" means data revealing identity document numbers, financial account details, payment credentials or other information designated as sensitive under applicable law.
- "KYC Data" means identity and address verification documents submitted in connection with Know Your Customer (KYC) compliance obligations.
- "Cookies" means small text files placed on a user's device by a web server to store session, preference or analytical information.
Data We Collect
jojobet may collect the following categories of Personal Data, depending on how you interact with the Services:
| Category | Examples |
|---|---|
| Identity Data | Full legal name, date of birth, nationality, MyKad number, passport number or driver's licence number |
| Contact Data | Email address, mobile phone number, residential address (including city — e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam) |
| Account Data | Username, hashed password, account preferences, session history |
| Financial Data | MYR transaction amounts, deposit and withdrawal records, payment method references (not full card or bank account numbers) |
| KYC Data | Copies of identity documents, proof of address, selfie photographs submitted during verification |
| Technical Data | IP address, browser type and version, device identifiers, operating system, time zone |
| Usage Data | Pages visited, features accessed, session duration, game activity logs, betting history |
| Communications Data | Content of messages submitted through customer support channels, feedback submissions |
Sensitive Data handling: KYC documents and financial transaction records are treated with elevated security controls. They are processed only for identity verification, fraud prevention and regulatory compliance purposes, and are not used for marketing or profiling.
How Data Is Collected
We collect Personal Data through the following means:
- Direct submission: When you complete registration, submit KYC documents, make a deposit request, request a withdrawal or contact customer support.
- Automated technologies: Session cookies, server logs and analytics tools that capture Technical Data and Usage Data as you navigate the Site.
- Payment processors: Transaction confirmation data returned from payment providers such as DuitNow, FPX, Touch 'n Go eWallet, Boost and GrabPay to reconcile deposits and withdrawals.
- Third-party identity verification services: Where an automated document verification provider is used to support KYC compliance, data processed by that provider is governed by a data processing agreement with jojobet.
We do not purchase Personal Data lists from third-party data brokers, and we do not collect personal data from social media platforms without explicit user consent.
Data Processing
jojobet processes Personal Data for the following specific purposes:
- Account creation and management: To create, maintain and administer your jojobet account, including authentication and preference settings.
- Identity verification (KYC): To confirm your identity, verify your age (21+ requirement), validate your residential address and comply with applicable anti-money laundering and counter-terrorism financing obligations.
- Payment processing: To facilitate deposits and withdrawals in MYR through eligible payment channels, reconcile transactions and resolve payment disputes.
- Service delivery: To provide access to casino games, sports betting markets, VIP programme benefits and customer support.
- Fraud prevention and security: To detect, investigate and prevent fraudulent transactions, account compromises, duplicate account creation and other security incidents.
- Regulatory compliance: To meet obligations under applicable financial crime, data protection and gaming regulations.
- Communications: To respond to support queries, notify you of significant account events, changes to these policies or service interruptions.
- Platform improvement: To analyse aggregated, anonymised usage data to improve site navigation, payment flows and content quality.
- Responsible gambling: To monitor account activity in connection with self-set deposit limits, self-exclusion requests and responsible play tools.
Legal Basis for Processing
jojobet processes Personal Data only where a lawful basis exists. The applicable legal bases are:
- Contractual necessity: Processing required to perform the Terms and Conditions agreement with you, including account management, payment processing and service delivery.
- Legal obligation: Processing required to comply with KYC, anti-money laundering, counter-terrorism financing and other regulatory obligations.
- Legitimate interests: Processing carried out for fraud prevention, platform security, abuse detection and internal service quality analysis, where those interests are not overridden by your privacy rights.
- Consent: Where you have provided specific, informed and freely given consent, such as for optional marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.
Sharing and Disclosure
jojobet does not sell, rent or trade your Personal Data to any third party for their own commercial purposes. We may disclose Personal Data in the following circumstances:
- Payment processors and financial institutions: Necessary transaction reference data is shared with payment providers (e.g., Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay) solely to process your deposit or withdrawal instructions.
- Identity verification providers: KYC Data may be shared with contracted document verification services under a data processing agreement.
- Fraud and security partners: Technical and usage data may be shared with fraud detection and cybersecurity service providers to protect the Platform and its users.
- Professional advisers: Legal, audit and compliance advisers may access limited Personal Data under confidentiality obligations where required by their services.
- Regulatory and law enforcement authorities: Where required or permitted by applicable law, including in response to a valid court order, regulatory investigation or statutory reporting obligation.
- Corporate transactions: In the event of a merger, acquisition, restructuring or sale of assets, Personal Data may be transferred to the successor entity, subject to equivalent privacy protections.
Any third party that processes Personal Data on jojobet's behalf is required to do so only under a written data processing agreement that mandates appropriate technical and organisational security measures.
Data Retention
jojobet retains Personal Data only for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable law. Key retention considerations include:
- Active accounts: Personal Data is retained for the duration of the account relationship.
- KYC and transaction records: Identity verification documents and financial transaction records may be retained for a period determined by applicable anti-money laundering and regulatory requirements, typically five to seven years following account closure.
- Communications Data: Customer support records are retained for a reasonable operational period to support quality assurance and dispute resolution.
- Technical and Usage Data: Aggregated or anonymised analytical data may be retained indefinitely as it no longer constitutes Personal Data.
Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that prevents reconstruction.
Data Security
jojobet implements appropriate technical and organisational security measures designed to protect Personal Data against unauthorised access, disclosure, alteration, accidental loss or destruction. These measures include, but are not limited to:
- Encrypted data transmission via HTTPS/TLS across all pages and API endpoints.
- Hashed storage of passwords — jojobet does not store passwords in plaintext.
- Access controls limiting Personal Data access to personnel with a documented operational need.
- Secure, access-controlled document storage for KYC submissions.
- Periodic internal security reviews and monitoring of access logs.
User responsibility: You are responsible for keeping your account password confidential and for logging out of shared devices. jojobet will never request your password through email, chat or telephone. If you believe your account credentials have been compromised, contact [email protected] immediately and change your password.
While we apply reasonable safeguards, no internet transmission or electronic storage system is entirely secure. In the event of a data breach that is likely to result in high risk to your rights, we will notify affected users in accordance with applicable regulatory requirements.
Cookies and Tracking
The jojobet Site uses cookies and similar technologies to support essential functionality, improve user experience and gather aggregated analytical information. The categories of cookies used are:
- Strictly necessary cookies: Required for login sessions, security tokens and basic Site operation. These cannot be disabled without preventing core functionality.
- Functional cookies: Store your language, display and accessibility preferences between sessions.
- Analytical cookies: Collect anonymised data about page visits, navigation paths and feature usage to help us improve the Site. Identifiable individual data is not derived from these cookies.
You may adjust your browser settings to refuse or delete cookies, though doing so may affect your ability to use certain Site features. jojobet does not use third-party advertising tracking cookies.
User Rights
Subject to applicable data protection law and regulatory obligations, you may have the following rights in respect of your Personal Data held by jojobet:
- Right of access: Request a copy of the Personal Data we hold about you.
- Right to rectification: Request correction of inaccurate or incomplete Personal Data.
- Right to erasure: Request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to any overriding retention obligations.
- Right to restriction: Request that we limit processing of your Personal Data in certain circumstances, such as while a rectification request is under review.
- Right to data portability: Request a structured, machine-readable copy of Personal Data you have provided to us, where technically feasible.
- Right to object: Object to processing based on legitimate interests, including processing for direct marketing purposes.
- Right to withdraw consent: Where processing is based on your consent, withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.
To exercise any of the rights listed above, please submit a written request to [email protected]. We will respond within a reasonable period as required by applicable law, typically within 30 calendar days. We may request proof of identity before processing your request.
Protection of Minors
jojobet Services are strictly intended for adults aged 21 years and above. We do not knowingly collect Personal Data from individuals under the age of 21. If we become aware that Personal Data has been collected from a person below the minimum age, we will take immediate steps to delete that data and close the associated account.
If you believe that a minor may have accessed or registered on the jojobet platform, please contact us immediately at [email protected] so that appropriate action can be taken. Parents and guardians are encouraged to use available device and browser parental controls to prevent underage access to gambling services.
International Data Transfers
Where Personal Data is transferred to or accessed from a jurisdiction outside Malaysia, jojobet takes reasonable steps to ensure that appropriate safeguards are in place. Such safeguards may include standard contractual clauses, data processing agreements, or reliance on adequacy determinations where applicable.
Transfers to payment processors and identity verification providers are limited to the minimum data necessary for the specific operational purpose, and each provider is subject to contractual data protection obligations.
Policy Amendments
jojobet reserves the right to update this Privacy Policy at any time. Where changes are material — for example, a new category of data processing, a change in sharing practices or a new legal basis — we will notify registered users via email or a prominent in-platform notice before the revised Policy takes effect.
The "Last reviewed" date displayed at the top of this page reflects the most recent revision. Continued use of the Services following any update constitutes acceptance of the revised Policy. We encourage you to review this page periodically.
Contact Us
If you have any questions, concerns or requests relating to this Privacy Policy or the processing of your Personal Data by jojobet, please contact our support team using the details below. The email address is displayed as plain text for security reasons and is not a clickable link.
Support email: [email protected]
Response target: We aim to acknowledge all privacy-related enquiries within 5 business days and provide a substantive response within 30 calendar days.
For responsible gambling enquiries, self-exclusion requests or related account matters, please visit the Responsible Gambling section of this Site, where additional guidance and account control options are documented.